Check Agent Config via Script

[shocko]

Guys, I building an generic script for my serves tor check compliance of about 100 different conf items. For McAfee ePo I'm checking things like:

• Agent version
• Status of services

I'd also like to check for the following:

1. Last time an on-demand scan was run
2. If on-demand scan is enabled
3. If on-access scan is enabled

This has to be accomplished using local data only and no querying the ePO DB/Server. I'd like to use APIs if possible but could also use the logs in the DEFLOGDIR i guess

[Peacekeeper]

Moving to a more suitable forum

[moekhass]

You can use your favorite method (batch script, or powershell etc). Please share your script with the community when done.

Here's what you need to query:

Agent version: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\Agent\AgentVersion

Agent Service Status : McAfeeFramework, macmnsvc, and masvc. These are the service names.